updated Staff model
updated deserialize query to check appAccess field