added allowed source ref and constrain