changed: logic for granting special access