0.5: start implementing accessControl