remove find/findone until we are sure it makes sense considering how we mimic allow deny