fix access control