notes and some basic access control