Advanced permission system

Currently, it is only possible to grant access to a complete record, including metadata and data. It would be very useful to be able further to restrict the given permissions to files or metadata. For example, you might be able to view the record's metadata but not the files themselves.