use application rights and oembed detection
add access right
update