interface-based auth access