added preliminary access control