adds access control to states