I found out entity access for a MF is ignored when the MF is fired from a database event. I fixed it by changing the entity access of the MF responsible for the database event to fire. In some way it makes sense. MF's applying entity access can only be called by MF's that apply entity access themselves. In this case, the system is not aware of the chain of events leading to the MF with entity access being fired. Don't know if the system could be made aware of that ...