implement access levels from API