target Step 2 : each activity has a role it’s visible to. roles are keep separate from the normal permission roles. pro: relays on existing carbon role API. cons: implementing is not that smooth (a) pre-calculate per user. OR (b) combine at view time.