added to check if a scope is allowed by the client