https://ones.com/blog/mastering-user-group-permissions-balancing-security-accessibility/