added validation in access rights