add a controller wide access block for defining controller specific access conditions