update access rules