At which position in the class hierarchy do you configure an Access of Role to Object (ARO) record to satisfy this requirement?

A music production company’s application contains the following classes:

– UPlusMusic-Production-Work

– UPlusMusic-Production-Work-Studio

– UPlusMusic-Production-Work-Brand UPlusMusic-Production-Work-Studio-Recording

– UPlusMusic-Production-Work-Studio-Editing

– UPlusMusic-Production-Work-Brand-Marketing

– UPlusMusic-Production-Work-Brand-Distribution

A requirement states that users with the Guest role can edit objects related to recording but not editing work.

At which position in the class hierarchy do you configure an Access of Role to Object (ARO) record to satisfy this requirement?
A . UPlusMusic-Production-Work-Studio
B . UPlusMusic-Production-Work-Studio-Editing
C . UPlusMusic-Production-Work
D . UPlusMusic-Production-Work-Studio-Recording