endpoint control // access required