enabled access control and fixed up the access permissions