so let me create a somewhat more concrete example: a user can only access something if their IP is in the correct CIDR range