correct wrong order: call allow before the subject method