so you could, for example, say that a user is a

viewer

of a resource, but only if they are accessing it from the

dev

environment