Feature Request: Grant access based on field/label selectors

[zachsmith1]

Context:

There may be resources where we want to scope users access within a project to resources with specific labels/fields. ie NSO creates leases for Connectors and users need to keep that lease alive. Instead of providing them access to all leases in a project we could scope it down to just the ones we want to give them access.