Scenarios
Basic allow read/write scenario
Different authors on different resources within one collection
Deny access to a member of a group
Delegation without relinquishing control
High-security: no evidence that a hidden file exists
Notes:
- From June meeting: in high-security systems, you shouldn't even reveal the file exists, even if you can read the collection. Furthermore, you can even create another file with the same name; no error is reported ("we can neither confirm nor deny").