Detecte/docs

Recipe: Data access control

Restrict which records or fields an agent can read.