Added: ensure attribute is allowed