...
PBAC membership policies are statements that combine attributes to describe what is permitted and what is not permitted. Policies can be local or global, and they can be formulated in such a way that they override other policies. Digital policies, which are made up of logical rules, are used to dynamically manage and assess user access. For example,
a) If the document is in the same department as the user, the user can see it.
b) If you are the document's owner and the document is in draft mode, you can edit it.
c) After 9 p.m. and before 9 a.m. deny access.
...