allow/deny filtering added to select query