Apply shopId check/assignment in allow rules