add accessDenied method