base user access control extension