Role Based Access Control with granular permissions, including target_id and request parameter matching.
https://bitbucket.org/stb_working/rbac/src/master/