debug AllowOnly : only for function if no restrictable