[rules-users] Filtering eligible records for authorization - Is a rules engine right solution ?