static volatile O isAllowed_function; // func(S, O[]) -> bool
static volatile bool isAllowed_all = true;

sbool isAllowed(S askingMethod, O... args) {
  // check on VM level
  O f = vm_generalMap_get('isAllowed_function);
  if (f != null && !isTrue(callF(f, askingMethod, args))) false;
  
  // check locally
  ret isAllowed_all || isTrue(callF(isAllowed_function, askingMethod, args));
}

Began life as a copy of #1016529