https://www.halfbrain.net/database-user-privilege-model-checklist/