>but unfortunately some of the permissions aren’t as granular as we would like.

Nice euphemism for "catch all" permissions...