https://ones.com/blog/comparison/confluence-permission-hierarchy-alternative/