https://financestargate.com/10-data-access-control-best-practices/