granted all access to rest page