Function check_access 

pub fn check_access(source: &str, target: &str, access: AccessType) -> bool

Check if access is allowed by MAC policy.

This is the primary access check function. It evaluates deny rules first (deny overrides allow), then checks for a matching allow rule.