fix access rules