access control implemented for application setup page