added access validation