internal access traversal rule