[rules-users] using from with not