defer actual access business logic to service. Expand canAccess() method in Synapse client to take ObjectType, ownerId and accessType.