security rule initial commit