https://ones.com/blog/knowledge/understanding-permission-control-secure-data-access/