allow only access to board members