cost-effective access control