correcting example for allow / deny