diff --git a/proto/collections/collections.proto b/proto/collections/collections.proto
index e7dd51fa9a8d481275997817fd60c47ccb472b65..b162e3fa60076d70a372f27468dda2463ef1feee 100644
--- a/proto/collections/collections.proto
+++ b/proto/collections/collections.proto
@@ -11,8 +11,13 @@ package content.collections;
 message Access {
   repeated common.Action actions = 1;
   repeated string hidden_fields = 5;
+
+  // Deprecated
   repeated string readonly_fields = 6;
   repeated string writeonly_fields = 7;
+
+  repeated string deny_read_fields = 8;
+  repeated string deny_write_fields = 9;
 }
 
 message Collection {
diff --git a/proto/common/common.proto b/proto/common/common.proto
index a929133532359066ac5e57f91cf49988cd5812ef..3221bdc3319e1da379daf089ca79f180e5b7f140 100644
--- a/proto/common/common.proto
+++ b/proto/common/common.proto
@@ -40,10 +40,15 @@ message Rule {
   repeated Action actions = 2;
   Access access = 3;
   repeated string hidden_fields = 5;
+
+  // Deprecated
   repeated string readonly_fields = 6;
   repeated string writeonly_fields = 7;
+
   string read_filter = 8;
   string write_filter = 9;
+  repeated string deny_read_fields = 10;
+  repeated string deny_write_fields = 11;
 }
 
 message Collaborator {