If any access option contains only wildcards server ignores access checks.
vulners.com/securityvulns/securityvulns:doc:5319