implement fine-grained access privileges in sus (wip)
Merge commit 'github/testing' into beta