Client side access control fixed.