Check if user has access before redirecting