Fixed major allow/deny rules