...
Note, the ruleCheckArg0 is the subject source. If it is blank, then the rule applies to all subject sources. If it is filled in, then the rule only applies to that subject source.
(v2.4 patch) If ruleCheckArg1 (comma separated list of options) has "allowGroups", then if a group is added to a group, allow it. If it doesnt have "allowGroups", and the added group is also in the folder where the rule is, then allow it. Otherwise deny(v2.4 patch) Rules change log consumer will check to see if any memberships need to be removed (based on rule)
...