// verifying access