scala: granular permissions/access restrictions