Job allow deny rules