EX7300 and "positive" MAC address filtering

Hi all,

I just bought and set up the EX7300 and was shocked to find out that it can't filter MAC addresses based on a list of allowed devices. This is the case on my router (WNDR3700) and also was on the previous AP (from D-Link). I found the possibility to "deny" a device, but that would mean, that it is already connected?! Am I missing something, or is this extra security layer gone? Or do the newer routers filter also wired devices by MAC addresses (which the WNDR3700 doesn't - I checked)?