WPF

public static class SecurityBehavior
{
    private static readonly char[] TagSeparators = { '|' };
    
    public static readonly DependencyProperty SecurityTagsProperty =
        DependencyProperty.RegisterAttached("SecurityTags",
        typeof(string), typeof(SecurityBehavior),
        new PropertyMetadata("", OnSecurityChanged));
    
    public static string GetSecurityTags(DependencyObject obj)
    {
        return (string)obj.GetValue(SecurityTagsProperty);
    }

    public static void SetSecurityTags(DependencyObject obj, string value)
    {
        obj.SetValue(SecurityTagsProperty, value);
    }

    public static readonly DependencyProperty AllowEnableProperty =
        DependencyProperty.RegisterAttached("AllowEnable",
        typeof(bool), 
        typeof(SecurityBehavior),
        new PropertyMetadata(false, OnSecurityChanged));

    public static bool GetAllowEnable(DependencyObject obj)
    {
        return (bool)obj.GetValue(AllowEnableProperty);
    }

    public static void SetAllowEnable(DependencyObject obj, bool value)
    {
        obj.SetValue(AllowEnableProperty, value);
    }
    
    private static void OnSecurityChanged(DependencyObject sender, DependencyPropertyChangedEventArgs e)
    {
        bool canEnable = GetAllowEnable(sender);
        if (canEnable)
        {
            string[] tags = GetSecurityTags(sender).Split(TagSeparators, StringSplitOptions.RemoveEmptyEntries);
            foreach (string tag in tags)
            {
                canEnable &= SecurityService.HasRights(tag);
            }
        }
    
        var element = (UIElement)sender;
        element.IsEnabled = canEnable;
    }

<TextBox Grid.Row="2" 
            Grid.Column="1"
            Text="{Binding EmployeeName, Mode=TwoWay, UpdateSourceTrigger=PropertyChanged}"
            Height="32"
            Width="250"
            local:SecurityBehavior.AllowEnable="{Binding AreFieldsEnabled, Mode=TwoWay, UpdateSourceTrigger=PropertyChanged}"
            local:SecurityBehavior.SecurityTags="can_add_employees|can_edit_employees" 
            HorizontalAlignment="Left"
            VerticalAlignment="Top"
            Margin="5"/>

public static class SecurityBehavior
{
    private static readonly char[] TagSeparators = { '|' };
    #region Allow Enable
    public static readonly DependencyProperty AllowEnableProperty =
                                DependencyProperty.RegisterAttached("AllowEnable",
                                typeof(bool),
                                typeof(SecurityBehavior),
                                new PropertyMetadata(false, OnAllowEnableChanged));
    public static bool GetAllowEnable(DependencyObject obj)
    {
        return (bool)obj.GetValue(AllowEnableProperty);
    }
    public static void SetAllowEnable(DependencyObject obj, bool value)
    {
        obj.SetValue(AllowEnableProperty, value);
    }
    private static void OnAllowEnableChanged(object sender, DependencyPropertyChangedEventArgs e)
    {
        FrameworkElement element = (FrameworkElement)sender;
    }
    #endregion
    #region Security Tags
    public static readonly DependencyProperty SecurityTagsProperty =
            DependencyProperty.RegisterAttached("SecurityTags",
            typeof(string), typeof(SecurityBehavior),
            new PropertyMetadata("", OnSecurityChanged));
    public static string GetSecurityTags(DependencyObject obj)
    {
        return (string)obj.GetValue(SecurityTagsProperty);
    }
    public static void SetSecurityTags(DependencyObject obj, string value)
    {
        obj.SetValue(SecurityTagsProperty, value);
    }
    private static void OnSecurityChanged(DependencyObject sender, DependencyPropertyChangedEventArgs e)
    {
        bool canEnable = GetAllowEnable(sender); //<=============== Returns FALSE by default
        if (canEnable)
        {
            string[] tags = GetSecurityTags(sender).Split(TagSeparators, StringSplitOptions.RemoveEmptyEntries);
            foreach (string tag in tags)
            {
                canEnable &= SecurityService.HasRights(tag);
            }
        }
        var element = (UIElement)sender;
        element.IsEnabled = canEnable;
    }
    #endregion
}

public class BuildingTypeViewModel
{
    public BuildingTypeViewModel(BuildingTypeEntity buildingType)
    {
        Caption = buildingType.Caption;
        
        var floors = new List<BuildingFloorViewModel>(buildingType.NumberOfFloors);
        for (int floorNumber = 1; floorNumber <= buildingType.NumberOfFloors; floorNumber++)
        {
            var floor = new BuildingFloorViewModel(buildingType, floorNumber);
            if (!floor.Packs.SchedulePacks.IsEmpty) floors.Add(floor);
        }
        
        Floors = floors;
    }
    
    public string Caption { get; }
    public IReadOnlyList<BuildingFloorViewModel> Floors { get; }
}

public class BuildingFloorViewModel
{
    public BuildingFloorViewModel(BuildingTypeEntity buildingType, int floorNumber)
    {
        Floor = floorNumber;
        Packs = new BuildingFloorPacksViewModel(buildingType, floorNumber);
    }
    
    public int Floor { get; }
    public BuildingFloorPacksViewModel Packs { get; }
}

public class BuildingFloorPacksViewModel : CustomTypeDescriptor, System.Collections.IEnumerable
{
    public BuildingFloorPacksViewModel(BuildingTypeEntity buildingType, int floorNumber)
    {
        SchedulePacks = buildingType.SchedulePacks.Where(p => p.Floor == floorNumber).ToDictionary(p => p.Caption);
        
        var properties = SchedulePacks.Keys.Select(name => new SchedulePackPropertyDescriptor(name)).ToArray();
        PropertyDescriptors = new PropertyDescriptorCollection(properties);
    }
    
    internal bool IsEmpty => SchedulePacks.Count == 0;
    private IReadOnlyDictionary<string, SchedulePackEntity> SchedulePacks { get; }
    private PropertyDescriptorCollection PropertyDescriptors { get; }
    
    public override PropertyDescriptorCollection GetProperties() => PropertyDescriptors;
    public override PropertyDescriptorCollection GetProperties(Attribute[] attributes) => PropertyDescriptors;
    
    public System.Collections.IEnumerator GetEnumerator()
    {
        // Need to implement IEnumerable to give you a single row in the grid:
        yield return this;
    }
    
    private sealed class SchedulePackPropertyDescriptor : PropertyDescriptor
    {
        public SchedulePackPropertyDescriptor(string name) : base(name, Array.Empty<Attribute>())
        {
        }
        
        public override Type ComponentType => typeof(BuildingFloorPacksViewModel);
        public override Type PropertyType => typeof(int);
        public override bool IsReadOnly => false;
        
        public override bool CanResetValue (object component) => false;
        public override void ResetValue (object component) => throw new NotSupportedException();
        public override bool ShouldSerializeValue (object component) => true;
        
        public override object GetValue (object component)
        {
            var parent = (BuildingFloorPacksViewModel)component;
            return parent.SchedulePacks[Name].Days;
        }
        
        public override void SetValue (object component, object value)
        {
            var parent = (BuildingFloorPacksViewModel)component;
            parent.SchedulePacks[Name].Days = (int)value;
        }
    }
}

1. Have you tried to publish using ClickInce in VS2017? Doesnt work. That's the whole reason I did my own.
2. I'm hoping that the user should not have to take any action when launching the app, like picking a DB.
3. Already did the coloring scheme for Test vs Production.