The disclosure relates to a lighting system which can be controlled from a wireless device in dependence on complying with an access rule that the wireless device is determined to be within in a spatial region associated with the lighting system. The disclosure provides apparatus for securing against the lighting system being controlled from a device located outside the relevant region via a rogue relay device located in that region. The apparatus comprises a user location module configured to determine user location information indicative of whether a user is accompanying the wireless device in the region associated with the lighting system, and an access module which is configured with a further access rule: that it does not allow the control of the lighting system by the wireless device if the user location information is indicative of the wireless device being unaccompanied by a user.