Apply suggestions from code review

Co-authored-by: Reneta Popova <[email protected]>

Author: NataliaIvakina

modules/ROOT/pages/authentication-authorization/property-based-access-control.adoc

@@ -12,7 +12,9 @@ CREATE ROLE regularUsers;
 [[property-based-access-control]]
 = Property-based access control
 
-In Neo4j, you can grant read privileges based on properties of nodes.
+Property-based access control grants permissions to users to read node properties based on property/value conditions.
+Each property-based privilege can only be restricted by a single property.
+For information about read privileges and syntax, see xref:authentication-authorization/privileges-reads.adoc[Read privileges].
 
 [IMPORTANT]
 ====
@@ -23,7 +25,6 @@ Users who can change this property can affect the granted property-based privile
 
 == Syntax
 
-For information about read privileges and syntax, see xref:authentication-authorization/privileges-reads.adoc[Read privileges].
 
 To specify the property/value conditions of the read privilege, you can use the following `pattern` syntax:
 
@@ -68,7 +69,7 @@ The user role does not need to have `READ` privilege for the property used by th
 
 === Grant a property-based privilege on a specific property using its value
 
-The following code shows how to grant permission to `READ` the `address` property on `Email` or `Website` nodes with domain `exampledomain.com` to role `regularUsers`.
+The following example shows how to grant permission to `READ` the `address` property on `Email` or `Website` nodes with domain `exampledomain.com` to role `regularUsers`:
 
 [source, syntax, role="noheader"]
 ----
@@ -85,7 +86,7 @@ GRANT READ { address } ON GRAPH * FOR (:Email|Website {domain: 'exampledomain.co
 
 === Grant a property-based privilege using `NULL`
 
-If you want to grant permission to `TRAVERSE` nodes with label `Email` where property `classification` is `NULL` to role `regularUsers`, use the following command:
+The following example shows how to grant permission to `TRAVERSE` nodes with the label `Email` where property `classification` is `NULL` to role `regularUsers`:
 
 [source, syntax, role="noheader"]
 ----
@@ -94,7 +95,7 @@ GRANT TRAVERSE ON GRAPH * FOR (n:Email) WHERE n.classification IS NULL TO regula
 
 === Deny a property-based privilege using a comparison operator
 
-To deny permission to `READ` and `TRAVERSE` nodes where the property `classification` is different from `UNCLASSIFIED` to role `regularUsers`, use the code below:
+The following example shows how to deny permission to `READ` and `TRAVERSE` nodes where the property `classification` is different from `UNCLASSIFIED` to role `regularUsers`:
 
 [source, syntax, role="noheader"]
 ----
@@ -103,8 +104,7 @@ DENY MATCH {*} ON GRAPH * FOR (n) WHERE n.classification <> 'UNCLASSIFIED' TO re
 
 === Grant a property-based privilege on all properties using a property value
 
-Imagine you need to grant permission to `READ` all properties on nodes where the property `securityLevel` is higher than `3` to role `regularUsers`.
-The following example shows how to do that.
+The following example shows how to grant permission to `READ` all properties on nodes where the property `securityLevel` is higher than `3` to role `regularUsers`:
 
 [source, syntax, role="noheader"]
 ----
@@ -118,7 +118,7 @@ The role `regularUsers` does not need to have `READ` privilege for the property
 
 === Deny a property-based privilege using a list of values
 
-The following code shows how to deny permission to `READ` all properties on nodes where the property `classification` is not included in the list of `[UNCLASSIFIED, PUBLIC]`.
+The following example shows how to deny permission to `READ` all properties on nodes where the property `classification` is not included in the list of `[UNCLASSIFIED, PUBLIC]`:
 
 [source, syntax, role="noheader"]
 ----
@@ -129,7 +129,7 @@ DENY READ {*} ON GRAPH * FOR (n) WHERE NOT n.classification IN ['UNCLASSIFIED',
 
 === Grant a property-based privilege using temporal value
 
-Granting permission to `READ` all properties on nodes where the property `createdAt` is later than the current date
+The following example shows how to grant permission to `READ` all properties on nodes where the property `createdAt` is later than the current date:
 
 [source, syntax, role="noheader"]
 ----
@@ -148,7 +148,7 @@ This is essential when revoking property-based privileges containing evaluated f
 Not all temporal values are comparable, see link:{neo4j-docs-base-uri}/cypher-manual/current/syntax/operators/#cypher-ordering[Cypher Manual -> Syntax -> Operators -> Ordering and comparison of values].
 ====
 
-Show the privilege created by the command in the previous example as a revoke command
+You can show the privilege created by the command in the previous example as a revoke command by running:
 
 [source, syntax, role="noheader"]
 ----