Access control enforcement function