It's curious that access control does not work easily. The tendency is to not have access when you need it, and then to grant access to more users than desired. A similar problem is visibility. Again, want minimum visibility to make it easy to move things around -- but end up wanting more visibility which then brings in everything.
Google-1
Google-2
personal notes