When you store the owner of an Entity you can use that in your Acces rule. If you do not know how to do that follow a learning path like this one: https://academy.mendix.com/link/paths/62/Constrain-Your-Data-Using-XPath or this one https://academy.mendix.com/link/paths/9/Configure-Advanced-Security
Regards,
Ronald