Fix access control on collections