SharePoint makes it pretty easy to assign very granular permissions to various
elements of a SharePoint site. The problem is that managing those granular
permissions over the long haul can be a pretty daunting task. Sure, you start
off with the best of intentions: create groups, assign permissions to groups,
put users in groups.