option 1: Every access must be checked against the access control mechanism