private application access