Wow, everything I hate about &quot;Enterprise Software&quot; in a single if statement. Have you ever noticed there are entire businesses built on fine-grained access control like this, that are utterly pointless bullshit? Probably full of security holes, leaky abstractions, poorly tested and responsible for creating a lot of support cases and manual intervention.<p>Figure out what the trust modality in your application is, and normally it&#x27;s a simple graph or can be managed with a straight-forward application of world&#x2F;group&#x2F;user UNIX-style permissions.