rule test11 deny no_where_clause on_queries update
users %@% match all rules test11