Improving access control flexibility