I have a requirement wherein if a fulfiller doesn't have an access to view the catalog item but impersonated another fulfiller, they still shouldn't be able to see the catalog item.