add some default access rules