Ex:

• The organisation do not have access to write back to AD
• Everybody (users) in a organisation have read permission on every document / library / site etc.

Based on "something magic" (list / user permission / token ... ) is there a way to give write permission based on a meta data tag?

If a document got the tag "CAR" the user "X" got persmission to write to the document?