Merge "Record access rejection for restricted ops." into sc-dev