THEN
    SELECT read_firewall_group_allowlist(arg_group_name,FW.rule) FROM mysql.firewall_group_allowlist FW WHERE name = arg_group_name;
  END IF;
  SELECT set_firewall_group_mode(arg_group_name, arg_mode) INTO result;
  IF arg_mode = "RESET" THEN
    SET arg_mode = "OFF";
  END IF;
  IF result = "OK" THEN
    INSERT IGNORE INTO mysql.firewall_groups VALUES (arg_group_name, arg_mode, NULL);
    UPDATE mysql.firewall_groups SET mode=arg_mode WHERE name = arg_group_name;
  ELSE
    SELECT result;
  END IF;
  IF arg_mode = "PROTECTING" OR arg_mode = "OFF" OR arg_mode = "DETECTING" THEN
    DELETE FROM mysql.firewall_group_allowlist WHERE name = arg_group_name;
    INSERT INTO mysql.firewall_group_allowlist(name, rule)
      SELECT name, rule FROM performance_schema.firewall_group_allowlist
      WHERE name=arg_group_name;
  END IF;
END