## sub 1 ,  pub 2,  pubsub 3
## %c is clientid , %s is username
##auth     type        value       pub/sub      topic
allow      ip          127.0.0.1      2         $SYS/#       
allow      clientid    0001           3         #            
deny       username    admin          3         #      
allow      username    joy            3         /test,hello/world       
allow      clientid    *              1         toCloud/%c   
allow      username    *              1         toCloud/%u   
allow      clientid    *              2         toDevice/%c  
allow      username    *              2         toDevice/%u  
deny       clientid    *              3         #