Limit permissions with roles for signed URLs | Hacker News Reader