bugfix for Allow from