allowed_to? specced/covered