update for API change
add put/get/del security based on allow/deny functions