Correct secondary access checks