isAllowed remote method