Back to RTBC , accessCheck is added to query as suggested by @catch.