Made scope optional in allow() and deny()