1 controlling access — 控制访问