Ex:

- The organisation do not have access to read back to AD
- Everybody (users) in a organisation have read permission on every document / library / site  etc. 

Based on "something magic" (list / user permission / token ... ) is there a way to give write permission based on a meta data tag? 

If a document got the tag "CAR" the user "X" got persmission to write to the document?