added missing sql
3086 adjusted validation logic to allow products with no access set