Core access-control related code, including