Understanding User Permissions in Access Control Systems 10329