Load the attached configuration into Nexus 2.8, then log in with credentials test/test.
Go to browse storage in snapshots. You'll be able to browse into "com/foo/project" without issue, but "com/foo/content" and "com/foo/content-test" will be blocked, even though they are clearly allowed by the repository target privilege, which has a regular expression of:
It only affects /service/local/repositories/<repo-id>/* and /service/local/repo_groups/<repo-id/* REST endpoints. What this means in practice is that it affects the browse storage and browse index trees in the UI.