Made allow() a private function.