ACCESS DE-NIED need not be relative, but authoritatively static