{ "%%user.custom_data.is_admin": true }
is causing server error and
{ "user.custom_data.is_deactivated": false }
is causing that all users can only list themselves. Expected behaviour is that this rule is only affectting user who does not have set is_deactivated in his custom data. There are other modifications using null and $in, but all of them are causing unexpected behaviour.