wrapping up user access control