How does a rule-based access control mechanism work?
1) It is based on filtering rules
2) It is based on identity rules
3) It is based on access rules
4) It is based on business rules