#288 - add access rules