You will have to be more specific.
If you have a rule that says:
Allow if GroupID = 1
Reject if GroupID = 2
and then you pass a GroupID of 3 then it won't do anything. You didn't define what to do. In that case it will do the opposite of the last rule, so Allow.
You need to define the rule to cover all scenarios if you want it to know what to do in all scenarios. You may want to use:
Allow if GroupID = 1
Then it will reject if it has any other value. The second line is redundant and ends up telling it to accept any other value.
Did this help? Tips are appreciated...
