fix access rule