anything else is too complex, including multiuser where one user must not see a part of data but may see another part