feat(engine)!: owner and resource-based access rules

feat(engine)!: owner and resource-based access rules #3264