generally google docs style recursive groups and folder permissions, eventually I'd like to add custom roles and orgs. It would be great if there was a full example, there seem to be several partial examples