[Dirlewanger]

Or you can have that logic at a back-end application level (assuming all clients are going through this one back-end to interact with the database).