with centralised access control