access restrictions

where users are either granted or denied when they request data

this can be based on geographic access restriction or a [[permission access restriction