At least one access rule is expected in a config.
Fix project example in project_test.go.
Add userContainer.
A Repo rule can detect groups of users.
Add test for user group detection in repo rule.