https://ones.com/blog/knowledge/mastering-user-permissions-secure-access-control/