This revision is part of a series. Click on the Stack tab below to see the context.
This series has also been squeezed into D47633 to provide an overall view.
Commit message:
This function checks whether a rule applies in the current context, i.e., if the subject's users/groups match that of the rule.
By contrast, it doesn't check if the rule as specified by the user is valid (i.e., consistent).