Is there a way to check if a denied enforcement was due to an explicit vs implicit deny? By implicit I mean there is no policy that explicity denies access for a user to a given resource.
https://casbin.org/en/editor. This is a online editor can help you to check your model and policy. And you can get this sub's policy by API to check if there is clear policy.