Lock with XACML before writing RELS-EXT