Inter-organizational cooperation has specific requirements for access control. The paper presents the results from a field study which looks at the cooperation between two engineering offices and a steel mill. Based on these findings we have developed new mechanisms for access control in groupware. These mechanisms allow to restrict operations on shared data while or even after they take place. The new access mechanisms can be decomposed and implemented into a component-based framework. We show how this framework can be extended to realize additional mechanisms for access control with little efforts. Keywords inter-organizational cooperation, case study, access control, tailorability