function merge(prev, cur) {
  cur.value = isAllowed(cur) || isAllowed(prev) ? "allowed" : "denied";

  return cur;
}
Merge function for policies rights
@param {Object} prev existing policies rights
@param {Object} cur new policies rights to merge

@returns {Object} the merged policies rights