Need to pass the connection into the access check, so we can see the user session