make sure the access rule can apply to several locations