AC: simplifying the way we check for access rights