fine grained security to allow various stages of control - view, execute and all