response to an access request