There is no need to enforce access right on instances because only internal code can use them and the design is to only check on the external calls. issue7765 review322581002