Permissions can be created for all users groups, nesting is supported either, for example, "item" which is not editable or which is not visible for some users can be created in "area".