add contraint of has READ access on the entity