no direct access is allowed