optimize "in" operator in yaml and rules
add isAllowed(resource, ruleName, model, context)
add test for shortcut false, true rules

rules:
  query: false