I know you can have ReBAC i.e. anyone can look at my "profile" (resource) but what if I want to show my profile but hide "salary" unless the role is HR or Manager, for any other role hide "salary" attribute.