The AccessController looks to see if all the domains in the call chain have permission