How to use interface via rules


I’m trying to restrict connection to interfaces using via rules as described in
But I am not successful.

I added a user in only one interface and tried connecting using another interface, the connection succeeded.
I added a user in all interfaces and tried connecting with another user, the connection succeeded.
I tried the same sort of things with groups, all my connections succeeded.

Is there something specific to do in order to restrict users to only some interfaces ?