rule no_selects deny on_queries select
users %@% match any rules no_selects