rule no_func deny function sum avg
users %@% match any rules no_func