adds deny overrides tests
adds allow overrides rule combining algorithm