access: restrict access per object

• NEW Adds the ability to restrict access per object independently from the parent.

Reviewed-by: Jiri Kuncar <jiri.kuncar@cern.ch>
Reviewed-by: Esteban J. G. Gabancho <esteban.gabancho@gmail.com>
Signed-off-by: Harris Tzovanakis <me@drjova.com>