simplify access rules on usercontroller
version 1.1 to 1.2