From the wiki:
"access=no, as any other access=* value may be overridden by more specific access tags."
It is easier to put access=no and specify the exceptions in this case and is a completely valid way of mapping.