added parameter to identify restricted access by ACL