$allowed is no longer used, this block seems like cruft from when the request was running an ITQL query.