minor changes

Author: HannesSandberg

modules/ROOT/pages/authentication-authorization/limitations.adoc

@@ -391,7 +391,8 @@ So due to the additional data access required by the security checks, this opera
 [[property-based-access-control-limitations]]
 === Property-based access control limitations
 Extra element-level security checks are necessary when adding security rules based on property rules, and these can have a significant performance impact.
-The following example shows how the database behaves when adding security rules to roles `restricted` and `unrestricted`:
+
+The following example shows how the database behaves when adding security rules for nodes to roles `restricted` and `unrestricted`, the same limitations apply to relationships as well:
 
 [source, cypher]
 ----

modules/ROOT/pages/authentication-authorization/property-based-access-control.adoc

@@ -12,9 +12,9 @@ CREATE ROLE regularUsers;
 [[property-based-access-control]]
 = Property-based access control
 
-Property-based access control grants permissions to users to read element properties based on property/value conditions.
+Property-based access control grants/denies permission to read or traverse elements based on property/value conditions.
 Each property-based privilege can only be restricted by a single property.
-For information about read privileges and their syntax, see xref:authentication-authorization/privileges-reads.adoc[Read privileges].
+For information and syntax for these privileges, see xref:authentication-authorization/privileges-reads.adoc[Read privileges].
 
 [IMPORTANT]
 ====
@@ -25,7 +25,7 @@ Users who can change this property can affect the granted property-based privile
 
 == Syntax
 
-To specify the property/value conditions of the read privilege, you can use the following syntax:
+To specify the property/value conditions of the privilege, you can use the following syntax:
 
 [source, syntax, role="noheader"]
 ----
@@ -99,13 +99,13 @@ Alternatively, you can use the following syntax:
 GRANT READ { address } ON GRAPH * FOR (:Email|Website {domain: 'exampledomain.com'}) TO regularUsers
 ----
 
-=== Grant a property-based privilege on a specific property using the value of that same property
+=== Grant a property-based privilege on a specific property using the value of another property
 
-The following example shows how to grant permission to `READ` the `since` property on `OWNS` relationships having `since` equal to `2025-01-01` to role `regularUsers`:
+The following example shows how to grant permission to `READ` the `since` property on `OWNS` relationships having `classification` equal to `UNCLASSIFIED` to role `regularUsers`:
 
 [source, syntax, role="noheader"]
 ----
-GRANT READ { since } ON GRAPH * FOR ()-[o:OWNS]-() WHERE o.since = date("2025-01-01") TO regularUsers
+GRANT READ { since } ON GRAPH * FOR ()-[o:OWNS]-() WHERE o.classification = 'UNCLASSIFIED' TO regularUsers
 ----
 
 === Grant a property-based privilege using `NULL`