Multi-level privileges for user access

Rule-based system for user access rights to data, at the level of user groups (roles) and in any detail (from entire categories of data or processes to screens, fields, specific documents, rows, etc.)