I'll do that, thanks Our rules have roles and fine-grained properties, and a state aspect as well, so that's why I was thinking PBAC, but I believe a hybrid RBAC/ABAC is what best fits my use case