Access rights for service layer methods + facade