allow vendor