https://anotherdamblog.com/2009/09/28/why-do-i-need-permissions-and-roles-in-dam/