Would have prefered `allowed_action` here instead. It is more meaning full and describes what it is for, instead of what it results in (which may even change at some later point)