'Allow all' is now called 'allow manage' and 'deny all' is now called 'deny read' in the client