Added reference for permitAll and denyAll