You grant access ONLY if current connected user has a username present in "authorisedUsernames" list.