https://ones.com/blog/understanding-permission-control-secure-data-access/