created deny_direct_access feature