renamed hasAccess() isAuthorized()