improved access rule handling