fixed access rights