https://ones.com/blog/comparison/maximizing-security-user-group-permissions/