Adding Operate access check at service layer, since we are not checking access on the command parameter here