introduce finer grained access control