Without an additional name it's nearly impossible to write positive security model based rules since the parameter name isn't defined.