analyze_auth_descriptor_rules