There is a new feature connected to AccessGroups that analyze your expressions automatically and deduce if they change real persitent data or only transient data (like variables and transient classes) and based on this enables input fields and actions or not.
This will save you many hours defining your access control rights in your bespoke systems - of that I am sure. Read the details:
https://wiki.mdriven.net/AccessGroups...
Download the sample: https://github.com/supportMDriven/Sam...