access levels can now be overridden by providing your own AccessManager instance