The Structure of Permissions: A Normative Framework for Access Rights