Refined handle access rules