introduced new SecurityRelationship with correct 'allowed' array property