support access and domain checks