@aaronpk @t idno's got access permissions baked into it already - attaching tokens to those means you can have per-item security according to groups of users. That, together with contacts (also important) is the big thing I wanted to do next. You've solved a huge part of the puzzle.