Ok, so you are passing in your query field to StoryNo, but there aren't any rules on StoryNo? So, again, what are you trying to achieve? Because I don't see any rules doing anything here. Is StoryNo unique? If so, you could promote it to the library, then when the param is passed in, you could query the library for any rows that match, and add logic to do something to block the user.
Hilary Stoupa
