allow denying specific portals