tweak some access rules