bugfix access rights check