How can I block all internet access (at certain times) except certain websites?

Up to today I was using access control and IP Group to block certain IP addresses (my children's laptops) from accessing Internet in the evening. I created a time range from 19:00 until 8:00 then used "Block" access control rule to block LAN->WAN for those laptops. However, now I need to still allow access only to few websites. I then went to Web Filtering and created a rule to allow those few websites.

What I do not understand is whether this will work (allow those website but block everything else) or will everything be blocked since all LAN->WAN is blocked and access control rule is applied regardless of web filtering? If so, how do I still block all access to WAN except those few websites?

I added another Web Filtering rule to "Block" All websites after the "Allow" to the specific websites. "Allow" is lower ID than "Block". Will this work as I intended - will it still block internet?

I am just confused how access control and web filtering work together.