o.k., I see. But how do I set up the correct rule? Do I have to setup both of them together? I'm confused...
But can I connect an individual error message to a SA rule or not? This is the main problem I have, because this seems not to work correctly. The error shows even I haven't submitted the form at all. Here is my (first) problem again:
I have an access rule on the admin-folder with page protection:
"If AccessLevel of Session =! 10 redirect to login page". On the login page, I put an error message "You don't have access to this page" with the corresponding SA rule.
Access protection works: if I call a protected admin page directly - without logging in -, I'm redirected to the login page works and the error message appears on the login page. So good so far.
But the error message also appears, when I just call the login page. Is this a session (cache) problem?