https://ones.com/blog/knowledge/mastering-user-group-permissions-balancing-security-accessibility/