updated access specification - on-delete doesn't have to be public