make defaultInsertDeny and defaultUpdateDeny part of baseDb