[ISSUE #9784] Fix the policy comparator to prioritize DENY over ALLOW

[majialoong]

Which Issue(s) This PR Fixes

Fixes #9784

Brief Description

Use correct policy judgment logic to give DENY a higher priority than ALLOW.

How Did You Test This Change?

Verification using unit tests.

[codecov-commenter]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 48.31%. Comparing base (bea086f) to head (c1de64f).

Additional details and impacted files

@@              Coverage Diff              @@
##             develop    #9785      +/-   ##
=============================================
- Coverage      48.37%   48.31%   -0.07%     
+ Complexity     12248    12233      -15     
=============================================
  Files           1314     1314              
  Lines          93668    93670       +2     
  Branches       12011    12012       +1     
=============================================
- Hits           45316    45252      -64     
- Misses         42757    42813      +56     
- Partials        5595     5605      +10     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

[majialoong]

Hi, @dingshuangxi888 @lizhimins. PTAL. Thanks !

[dingshuangxi888]

LGTM