adds interceptor but still lacks access restriction