Fix is_allowed_for, add FIXME comments for pending work in the next
sprint.