change to access rights model