Other issues I think should be mentioned\n\u2022 The enforcement process of answer the question does the user have permission to resource? should not be distinguished by the resource type\n\u2022 for making things more simple and clean, there is no need to create duplicate permissions type for specific resources - for example no need \u201ccan access all datasources\u201d and \u201ccan access all dashboards\u201d and \u201ccan access\u201d to specific dashboard.\n       the permission \u201cread/access\u201d can be used together for almost all the resources\n\u2022 It is so complicated and contrary to \u201cseparation of concerns\u201d principle when specific resource type is mentioned in the security manager\nNow we can move on how to implement it ( and refactor current code)