Store access controls in their own table and rewrite node views to perform access checks.