If the host initiator(s) are connected directly to E-Series without a SAN switch in the middle, then the access controls are dictated by the LUN mapping table. Each host WWPN(s) is defined manually and assigned specific LUNs / Volumes. That's one way of restricting / controlling access.