restrict parent interface with class access
add spec for parent access controller