added allow and deny methods