add interface
revoke access to _layouts