I realized a long time ago that highly granular permissions schemes *always* fail due to excessive complexity. Facebook hasn't.. yet.