Added access control, has_many relations