Permissions: design for trust, not for control
A user needs a contract in order to respond to a customer. They open the ECM, search for it, but can’t find it. The contract exists, but they don’t have access to it. They therefore send a message to a colleague, who finds the contract, downloads it, and sends it as an email attachment. The permission model has done exactly…

