API endpoint B2
AC-3: Access Enforcement