Here: http://docs.strongloop.com/display/DOC/Controlling+data+acce... is pretty much exactly what you asked for.