[FIX] security rule in portal