Update access_control.rb