user access control flags