fix access denied w/ cas