Fix ACL enforcement
Fix ACL enforcement

This creates one function that takes a rule and the required permissions and returns whether it should be allowed and whether to leave the decision to the parent acl.

Then this function is used everywhere. This makes acl enforcement consistent.

There were several places where a default allow policy with explicit deny rules wasnt being handled and several others where it wasn’t using the parent acl appropriately but would lump no policy in with a deny policy. All of that has been fixed.

scalp42/consul,42wim/consul,42wim/consul,42wim/consul,youhong316/consul,42wim/consul,hashicorp/consul,vamage/consul,hashicorp/consul,calgaryscientific/consul,calgaryscientific/consul,youhong316/consul,kingland/consul,kingland/consul,kingland/consul,vamage/consul,calgaryscientific/consul,vamage/consul,scalp42/consul,scalp42/consul,calgaryscientific/consul,youhong316/consul,hashicorp/consul,vamage/consul,hashicorp/consul,scalp42/consul,kingland/consul,42wim/consul,youhong316/consul,vamage/consul,kingland/consul,calgaryscientific/consul,scalp42/consul,youhong316/consul