Enforce Access Control between the things

In Mozilla gateway, if I want to enforce access control between the things, such that when a user tries to build a rule I allow or deny things to be used together.

What is the best way to enforce this? Is “rules-engin/Rules.js” a suitable file for that?

Thank you