I'm using M3D1 and investigating access control.

Say I have a product that's developed by 5 component teams while being managed and tested by separate teams. Is there a way to setup Project(s) and Teams in a way where work items and plans span the product (visible to all 7 teams) but access to each components source is restricted by team (i.e. management team and test teams can not see source and component teams can only see their own source)?