Updated AccessControlHandler to return AccessResult