A lot more flexible dynamic segment permissions