using allow deny rules and new tests