more access control but fixes

major overhaul to follow