<<Security Requirement>> Implement fine-grained, least privilege access control ()