https://ones.com/ja/blog/knowledge/balancing-security-and-convenience-in-permission-checks/