An organization is using an enterprise resource management (ERP) application. Which of the following would be an effective access control? A、User-level permissions B、Role-based C、Fine-grained D、Discretionary