Attribute level access controls

With this change, an attribute can be locked for read/write access by
all roles except given ones