Fix bug related with can()
ability checking. The bug occurs when dealing with this rule (example with User A)
!scope:resourceA/*:review
scope:resourceA/{"author": 'A'}:*
It means that the User A :
- Cannot do review on all field of resourceA
- Can do anything (except review) on resourceA authored by User A (specific author field)
From the previous version, the user cannot do action described in number 2
above. But it already fixed on this release version