How a rule is chosen

The first published rule that matches the person wins.

• Rules are checked by priority (lower numbers first), then ordering, then id.
• Empty conditions are ignored. Groups and access levels match if any selected value fits.
• On a first login, a first-login rule is tried before a normal after-login rule.
• A rule for one exact user beats a broader rule when it has the lower priority number. Set specific rules to 1-20 and general fallbacks to 100 or higher.