more convenient access restriction handling