update access control to wildcard