added access rights control