[macker-user] allow and nested allow

[Florent Z. <fza...@fr...>]

Hello,

First, thank you for your tool. It's quite usefull. But after plying at
bit with it, I have the following question:

What is the pratical difference between "allow" at the same level as
"deny" and "allow" nested inside a "deny" ? I've read the documentation
that says it theorically behaves somehow like include/exclude, but in
practice, I've run the modularity exemple with both and I have exactly
the same results. here is the modified part:
<access-rule>
  <message>${from} must access the ${module} module through its
API</message>
  <deny>
    <to pattern="inside" />
    <allow><from pattern="inside" /></allow>
    <allow><from pattern="factory" /></allow>
  </deny>
</access-rule>

May you give me more precision on that issue ?

Thanks in advance

Florent