[add] client access control