added allowed users check