why is CMG blocking access?