Role-based access control via the ContentType framework.
Grant codenames to roles or users and check them.