Report question

Question: How to represent RESTful attribute level access control?