rename canAccess -> isAllowed