documents (read, edit, comment, etc), foo(read, write, view, eat), bar(read, approve, blah,)