RFC: Adopt relationship-based access control (#594) - RFC123