added access control doc