more tweaks to the access and policies