simplify access-control