-- simple AccessControl for Backend  and bugFix

Signed-off-by: qiansen1386 <qiansen1386@gmail.com>