https://ones.com/blog/comparison/confluence-permission-hierarchy-alternatives-2/