Practical scenarios where Box's Waterfall permission model makes no sense | Dark Hacker News