fixed up allow/unallow