Access is always granted if the invoking user is the super-user or the $mail_owner user.
The real UID of the process is looked up in the system pass- word file, and access is granted only if the corresponding login name is on the access list.