De bons points chez Roc :

http://robert.ocallahan.org/2011/06/permissions-for-web-applications_30.html?showComment=1309560501000#c1377259396140044328