Yup from a security perspective a whitelist is an excellent idea here. You could even define the white list as a method on the manager so it's a bit more explicit what it is.