allow user read host definition