https://ones.com/blog/knowledge/fine-grained-permission-control-app-security/