Done with parsing of rules....Permissive domain check is left still