Best Practices for Designing your Access Control List

This guide is still a work in progress. Just a general word of warning:

warning

Avoid too deeply nested subject set indirections (more than ~5).