fixed deny method