Added new rules for investigation-users
Correct a bug in the prefix of the user name ('db/' instead of 'ldap/')