ACCESS-63. Restrict add *, dfs, delete *