access rights in an '$and' if necessary