Hello, Zoltan.
Could you please clarify your requirements? Because you combined different objects and approaches in one query:
· Marketing attributes
· Access Control Engine (actors, rights,etc)
· Interaction center (you posted your question in this space)
In general for your information ACE in standard implementation restricts an access to the whole object (for example Business Partner) and is not designed to restrict its part (I assume marketing attributes here). To restrict an access to marketing attributes in BP there are so-called authorization groups which are maintained in attributes set.