Changed $allowed_actions from public to private