allow apply copy condition deny extends graph linear profile rule ruleset search unsafe