add data access control