Fine grained permissions / access control with ownerships & attribute picking, done right.