Enforce access control