https://ones.com/blog/mastering-user-permissions-secure-access-control/