051d955 Remove negative check for role

Authored and Committed by admiyo 5 years ago
    Remove negative check for role
    
    The Deny_stack_yuser rule extends an antipattern.
    Since users can rop rules by creating a trust,
    it is trivially circumvented.  Thus, it is not a rule
    that should be continued, and will make it difficult to
    merge the common portion of the policy files.
    
        
file modified
+5 -7