Updated:
- Fixed allow_only and permission issue.