The XRAS Rules Engine provides an API for XRAS to determine what a user can and can't do. An allocation process has the ability to customize their own set of rules in XRAS Admin.
API Documentation