added access controller and denied view for it