Feature/1576 flag permission policies that deny api actions

[alexanderdean111]

Description

Added two new rules to address #1576

Fixes #1576

Type of change

Select the relevant option(s):

• Bug fix (non-breaking change which fixes an issue)
• New feature (non-breaking change which adds functionality)
• Breaking change (fix or feature that would cause existing functionality to not work as expected)
• This change requires a documentation update

Checklist:

• My code follows the style guidelines of this project
• I have performed a self-review of my own code
• I have commented my code, particularly in hard-to-understand areas
• My changes generate no new warnings
• I have added tests that prove my fix is effective or that my feature works (optional)
• New and existing unit tests pass locally with my changes

[rdegraaf]

You check for Deny statements in inline User permission policies and in Managed permission policies, but not in inline Role or inline Group permission policies. Also, is there a way to write a single check for all four? I'm not a fan of the pattern of having four separate checks for everything.