refactor to add access control to already_existing access control routines in access.py