fix typo for allow and disallow