add rules for write access