user/allowAccess API version 1.0