fixed acces rights check