added additional 'allowed' access code