This Q+A originally appeared on Information Security Stack Exchange.  Question: We are looking to implement Attribute-Based Access Control. While we are sold on the philosophy, there are two topics that seem to crop up: Will it lead to significant performance issues? Especially if we seek fine-grai…