Update security.rule