Practical scenarios where Box's Waterfall permission model makes no sense | Hacker News Reader