[% FOREACH user IN users -%][% END -%] allow