User based access control with label based resource access

Hi Lorenzo this sounds what I happen to be working on as well. I had to tweak the config a bit. including customize authorization logic in the external web service.
config here for your reference, but its still a work in progress, with

  1. server-side scripting to label studies based on ref physician tag
  2. custom authorization logic to name against label

Prev discussion here