Subgraph ALLOW OR PERMIT