Perform authz filtering on direct access.