The example above demonstrates how it's possible to use the permissions system to create administrators with some subset of power, addressing Tom's concern that permission_p is ineffective because 'admins' can do whatever they like. It has nothing to say about scoping privileges to object types which has already been discussed, except that it uses the default style of privilege creation used throughout the toolkit.
