there's already a check_access proc, use that