very fine-grained access with very simple checking, looking for a way to model that