id: not in allowed list