and they can't have access in the other environment(s)?