This is only one special case of the fact that distributed systems are a security antipattern. The solution lies in the direction of specializing information for roles. But that, in turn, involves two things that are effectively impossible: (1) defining roles, which involves analyzing business processes, which involves stepping on people's toes and making people look bad; (2) breaking the database-architecture pattern of overloading all of the stages of the lifecycle of a business object onto one type.