adding grant shouldn't require authorized access