implemented more detailed acces control defintion