access control without inheritance