https://singularityfeed.com/10-data-access-control-best-practices/