Rather than spending hours reading documentation, build your permissions with the Modeler. Just answer a few prompts about your application and you'll get a structured authorization model in return.