We are increasingly finding our permissioning system meeting significant limits. For example:
- you can set global permissions determining who can change card permissions. Whoever can do that can change all the permissions on all the cards he/she can see. so there's no emergent areas controlled by subgroups
- because all permissions are set on a card by card basis, it's difficult to change permissions for a group of cards at once, like all cards of a given type.
- because permissions are not card content themselves, they cannot be viewed and reviewed in all the flexible ways we want, so that if you want a special admin view of permissions, we have to build a special new interface. To date this has also kept permissions out of WQL
- there are crucial permission patterns we cannot yet support, like opening up viewing of a card to an individual user or a few individual users.