_isAllowed() checks for access. Debug only.