https://freedom-to-tinker.com/blog/felten/design-is-a-poor-guide-to-authorization/
Freedom to Tinker 05/13/2013