only allow access to map tiles