Check for deny, if not present default to allow