How to define access based on some conditions

If you want to limit access to business objects or its attributes based on some conditions you have to specify business rules that use the PROTECT action. See the description of the PROTECT action in the Rule Language Reference for details.