Extracting “user profiles” out of your permissions system | Hacker News Reader