central access rule