"By default, there is an allow rule configured for All users." . . . .