You don't need to get it like this first... you can get the entity, get the rule from the authorization collection and update or remove it