allow access to page and resource