Enforcing task security

We are exploring the optimum way to enforce task security in Oracle Warehouse Management.  This is a Project Manufacturing environment where a material attendant may be cleared for Project X but not Project Y.  There are 2 other dimensions to this case.  The attendant's clearance to handle the item also needs to be checked as well as his release to transact in the location (subinventory).  Here are the 3 probable approaches we have come up with -

(1) Restrict material handlers to particular task types.  Then, assign the pick or project transfer transaction from the controlled subinventory to a task type.

(2) Leverage Role Based Access Control (RBAC) using Virtual Private Database (VPD).  VPD will deploy Row Level Security at the database level and is not dependent on Applications programming.