Resigned to use database for all post-access in order to make all security handling consistent