How granular can access controls go?
blog.orgzit.com