Worked on refining access control within the dpc-sdp/tide_core repository, focusing on enhancing security and governance for Drupal-based backend systems. The main feature delivered involved revoking delete permissions from editor, approver, and approver_plus roles, enforcing the principle of least privilege while maintaining operational flexibility. Approver_plus was granted CRUD permissions on organization terms, supporting lifecycle management without increasing risk. These permission changes were implemented in PHP and deployed through the tide_core.install process to ensure consistent enforcement at deployment. The work addressed business needs for tighter role management and traceable permission changes, contributing to a more robust and auditable access control framework.