learning to design permission systems is a bit of a mind bender :]