more restrictive access rights