Hyperledger Composer has an access control file (.acl) with which you can program business access control and network access control. Business access control is for resources within a business network, whereas network access control refers to control over administrative network changes.

Here's an example of network access control being granted:

rule networkControlPermission {
  description:  "networkControl can access network commands"
  participant: "org.acme.foodchain.auction.networkControl"
  operation: READ, CREATE, UPDATE
  resource: "org.hyperledger.composer.system.Network"
  action: ALLOW  
}

Here's another example:

rule SampleConditionalRuleWithTransaction {
    description: "Description of the ACL rule"
    participant(m): "org.foodchain..SampleParticipant"
    operation: ALL
    resource(v): "org.example.SampleAsset"
    transaction(tx): "org.example.SampleTransaction"
    condition: (v.owner.getIdentifier() == m.getIdentifier())
    action: ALLOW
}

You can get further information about the Hyperledger Composer access control language by accessing the following link: https://hyperledger.github.io/composer/v0.16/reference/acl_language.html.