access control improvements
added access control test