framework for allow and deny access. Need to fill in the methods

Change-Id: Ieff2755c1f098de5750077498daace4e71eb69b7