implement some access rights stuff