...
These requirements gave rise to separate services for Groups and Permissions. The Groups design was fairly complex since it was meant tried to accommodate a range of environments. The Permissions design was fairly simple, since it was focused on protecting a few core portal functions.
...