Enforce Access controls by user type