diff --git a/modules/bazarr/module.json b/modules/bazarr/module.json
index 724f0e3..9a4f684 100644
--- a/modules/bazarr/module.json
+++ b/modules/bazarr/module.json
@@ -18,6 +18,24 @@
       "why": "managing subtitles"
     }
   ],
+  "accesses": [
+    {
+      "path": "/services/media/movies",
+      "mode": "read-write"
+    },
+    {
+      "path": "/services/media/series",
+      "mode": "read-write"
+    },
+    {
+      "path": "/services/media/anime",
+      "mode": "read-write"
+    },
+    {
+      "path": "/services/media/downloads",
+      "mode": "read"
+    }
+  ],
   "resources": [
     {
       "id": "mesh-state",
@@ -32,34 +50,6 @@
       "mode": "0700",
       "owner": "1000:1000"
     },
-    {
-      "id": "media-movies",
-      "type": "directory",
-      "path": "/services/media/movies",
-      "mode": "0755",
-      "owner": "1000:1000"
-    },
-    {
-      "id": "media-series",
-      "type": "directory",
-      "path": "/services/media/series",
-      "mode": "0755",
-      "owner": "1000:1000"
-    },
-    {
-      "id": "media-anime",
-      "type": "directory",
-      "path": "/services/media/anime",
-      "mode": "0755",
-      "owner": "1000:1000"
-    },
-    {
-      "id": "media-downloads",
-      "type": "directory",
-      "path": "/services/media/downloads",
-      "mode": "0755",
-      "owner": "1000:1000"
-    },
     {
       "id": "server",
       "type": "container",
diff --git a/modules/bookshelf/module.json b/modules/bookshelf/module.json
index 6242c72..af52d4d 100644
--- a/modules/bookshelf/module.json
+++ b/modules/bookshelf/module.json
@@ -20,6 +20,16 @@
       "why": "managing the ebook/audiobook library"
     }
   ],
+  "accesses": [
+    {
+      "path": "/services/media/books",
+      "mode": "read-write"
+    },
+    {
+      "path": "/services/media/downloads",
+      "mode": "read-write"
+    }
+  ],
   "resources": [
     {
       "id": "mesh-state",
@@ -34,20 +44,6 @@
       "mode": "0700",
       "owner": "1000:1000"
     },
-    {
-      "id": "media-books",
-      "type": "directory",
-      "path": "/services/media/books",
-      "mode": "0755",
-      "owner": "1000:1000"
-    },
-    {
-      "id": "media-downloads",
-      "type": "directory",
-      "path": "/services/media/downloads",
-      "mode": "0755",
-      "owner": "1000:1000"
-    },
     {
       "id": "server",
       "type": "container",
diff --git a/modules/lidarr/module.json b/modules/lidarr/module.json
index 5172bba..c285762 100644
--- a/modules/lidarr/module.json
+++ b/modules/lidarr/module.json
@@ -20,6 +20,16 @@
       "why": "managing music"
     }
   ],
+  "accesses": [
+    {
+      "path": "/services/media/music",
+      "mode": "read-write"
+    },
+    {
+      "path": "/services/media/downloads",
+      "mode": "read-write"
+    }
+  ],
   "resources": [
     {
       "id": "mesh-state",
@@ -34,20 +44,6 @@
       "mode": "0700",
       "owner": "1000:1000"
     },
-    {
-      "id": "media-music",
-      "type": "directory",
-      "path": "/services/media/music",
-      "mode": "0755",
-      "owner": "1000:1000"
-    },
-    {
-      "id": "media-downloads",
-      "type": "directory",
-      "path": "/services/media/downloads",
-      "mode": "0755",
-      "owner": "1000:1000"
-    },
     {
       "id": "server",
       "type": "container",
diff --git a/modules/nzbget/module.json b/modules/nzbget/module.json
index 2c0b92d..e3dee8e 100644
--- a/modules/nzbget/module.json
+++ b/modules/nzbget/module.json
@@ -20,6 +20,12 @@
       "why": "the download client's pages"
     }
   ],
+  "accesses": [
+    {
+      "path": "/services/media/downloads",
+      "mode": "read-write"
+    }
+  ],
   "resources": [
     {
       "id": "mesh-state",
@@ -34,13 +40,6 @@
       "mode": "0700",
       "owner": "1000:1000"
     },
-    {
-      "id": "media-downloads",
-      "type": "directory",
-      "path": "/services/media/downloads",
-      "mode": "0755",
-      "owner": "1000:1000"
-    },
     {
       "id": "server",
       "type": "container",
diff --git a/modules/plex/module.json b/modules/plex/module.json
index bb9dc37..665252f 100644
--- a/modules/plex/module.json
+++ b/modules/plex/module.json
@@ -23,6 +23,28 @@
       "why": "streaming and the app; reaching it from outside is a route grant later"
     }
   ],
+  "accesses": [
+    {
+      "path": "/services/media/movies",
+      "mode": "read"
+    },
+    {
+      "path": "/services/media/series",
+      "mode": "read"
+    },
+    {
+      "path": "/services/media/anime",
+      "mode": "read"
+    },
+    {
+      "path": "/services/media/music",
+      "mode": "read"
+    },
+    {
+      "path": "/services/media/audiobooks",
+      "mode": "read"
+    }
+  ],
   "resources": [
     {
       "id": "mesh-state",
@@ -44,41 +66,6 @@
       "mode": "0700",
       "owner": "1000:1000"
     },
-    {
-      "id": "media-movies",
-      "type": "directory",
-      "path": "/services/media/movies",
-      "mode": "0755",
-      "owner": "1000:1000"
-    },
-    {
-      "id": "media-series",
-      "type": "directory",
-      "path": "/services/media/series",
-      "mode": "0755",
-      "owner": "1000:1000"
-    },
-    {
-      "id": "media-anime",
-      "type": "directory",
-      "path": "/services/media/anime",
-      "mode": "0755",
-      "owner": "1000:1000"
-    },
-    {
-      "id": "media-music",
-      "type": "directory",
-      "path": "/services/media/music",
-      "mode": "0755",
-      "owner": "1000:1000"
-    },
-    {
-      "id": "media-audiobooks",
-      "type": "directory",
-      "path": "/services/media/audiobooks",
-      "mode": "0755",
-      "owner": "1000:1000"
-    },
     {
       "id": "server",
       "type": "container",
diff --git a/modules/qbittorrent/module.json b/modules/qbittorrent/module.json
index daa6629..56b0858 100644
--- a/modules/qbittorrent/module.json
+++ b/modules/qbittorrent/module.json
@@ -20,6 +20,12 @@
       "why": "the download client's pages"
     }
   ],
+  "accesses": [
+    {
+      "path": "/services/media/downloads",
+      "mode": "read-write"
+    }
+  ],
   "resources": [
     {
       "id": "mesh-state",
@@ -34,13 +40,6 @@
       "mode": "0700",
       "owner": "1000:1000"
     },
-    {
-      "id": "media-downloads",
-      "type": "directory",
-      "path": "/services/media/downloads",
-      "mode": "0755",
-      "owner": "1000:1000"
-    },
     {
       "id": "server",
       "type": "container",
diff --git a/modules/radarr/module.json b/modules/radarr/module.json
index 607972f..2d09bfe 100644
--- a/modules/radarr/module.json
+++ b/modules/radarr/module.json
@@ -20,6 +20,16 @@
       "why": "managing films"
     }
   ],
+  "accesses": [
+    {
+      "path": "/services/media/movies",
+      "mode": "read-write"
+    },
+    {
+      "path": "/services/media/downloads",
+      "mode": "read-write"
+    }
+  ],
   "resources": [
     {
       "id": "mesh-state",
@@ -34,20 +44,6 @@
       "mode": "0700",
       "owner": "1000:1000"
     },
-    {
-      "id": "media-movies",
-      "type": "directory",
-      "path": "/services/media/movies",
-      "mode": "0755",
-      "owner": "1000:1000"
-    },
-    {
-      "id": "media-downloads",
-      "type": "directory",
-      "path": "/services/media/downloads",
-      "mode": "0755",
-      "owner": "1000:1000"
-    },
     {
       "id": "server",
       "type": "container",
diff --git a/modules/sonarr/module.json b/modules/sonarr/module.json
index 9e19164..ace8073 100644
--- a/modules/sonarr/module.json
+++ b/modules/sonarr/module.json
@@ -20,6 +20,20 @@
       "why": "managing series"
     }
   ],
+  "accesses": [
+    {
+      "path": "/services/media/series",
+      "mode": "read-write"
+    },
+    {
+      "path": "/services/media/anime",
+      "mode": "read-write"
+    },
+    {
+      "path": "/services/media/downloads",
+      "mode": "read-write"
+    }
+  ],
   "resources": [
     {
       "id": "mesh-state",
@@ -34,27 +48,6 @@
       "mode": "0700",
       "owner": "1000:1000"
     },
-    {
-      "id": "media-series",
-      "type": "directory",
-      "path": "/services/media/series",
-      "mode": "0755",
-      "owner": "1000:1000"
-    },
-    {
-      "id": "media-anime",
-      "type": "directory",
-      "path": "/services/media/anime",
-      "mode": "0755",
-      "owner": "1000:1000"
-    },
-    {
-      "id": "media-downloads",
-      "type": "directory",
-      "path": "/services/media/downloads",
-      "mode": "0755",
-      "owner": "1000:1000"
-    },
     {
       "id": "server",
       "type": "container",