updated access control for lists