A developer has set the Rule security mode on the access group to Deny.

Require Access of Role to Object rules be specified for each layer in the class hierarchy and not inherited from parent classes.

Deny access to a rule if the privilege of the user is not defined in an Access of Role to Object.

Disable standard privileges providing administrator access to the application (for example AllFlows and AllFllowActions).

Ensure that all rules with the option of specifying a privilege have a privilege. Only users with the privilege can execute the rules.