need resource restriction capability
Earlier versions of the SRB allowed any user to access and write to any
SRB-registered storage resource. We need to be able to specify restrictions on
the use of resources such that a particular site manager can indicate which
users can write to the resource. This might be accomplished through a
user/group ACl mechanism, or through srb domain capabilities, or otherwise.