update allow disallow