Access control

Roles and rules.

Roles say what someone may do. Attribute rules narrow that by the data itself — its classification, its owner, the department it belongs to — and are consulted after the role allows. A request has to pass both.