[feature] Access control to restrict the access to the data

[thinkORo]

Is your feature request related to a problem or challenge? Please describe what you are trying to do.
I'd like to restrict the access to the data via a x-based-access-control pattern (x could be a Role or an Attribute). For that we need two different things:

1. authentication
2. authorization

Describe the solution you'd like
for 1.: at least a username and password must be defined (for instance via a user.list file) or, in the second step, a specific IAM provider like keycloak
for 2.: a way to grant or revoke permissions on different objects

This feature could be implemented step by step with a simple authentication which would increase the current (non-exsisting?) security solution in Arrow Ballista.