add on access rights checking