Declarative security for CRUD operations on entities.