A. Require Access of Role to object rules to be specified for each layer in the class hierarchy and not inherited from parent classes.

B. Disable standard privileges providing administrator access to the application (for example AllFlows and AllFlowActions)

C. Deny access to a rule if the privilege of the user is not defined in an access of Role to Object.

D. Ensure that all rule with the option of specifying a privilege have a privilege. Only users with the privilege can execute the rules.