Change in behavior: move access control to the Access model.