<<Security Requirement>> Implement fine-grained, least privilege access control (copy) ()