fixes #86 added allow field in the Privacy object