Simplify deny_access handling