add access-flags to enable Access Control