[kva.kva]

All rules are matched in order in the Rule Base. One rule at a time.
May be you mean feature of User Authentication. In this case the authenticating security server first checks if the connection can be allowed by a rule that does not require authentication. If one exist, the user will be connected through the less-restrictive rule, bypassing the User Authentication rule.