Can you control all of these things with permissioning via an auth server of some kind?