bug fix: always use default level of access