Added allow/deny rules for collection