> Person A can only read document X because they are performing duty b on project y.
How is this _not_ a binary can/can't read scenario? The person can either read it because they're performing the duty, or can't ready it because they're not.
It's not binary because they should only be able to read it while performing duty b. There needs to be something that enables/disables access when they start/stop working on it, or checks access before the read it.
How is this _not_ a binary can/can't read scenario? The person can either read it because they're performing the duty, or can't ready it because they're not.