We're in the middle of redesigning our access control layer. Following the requirments of our platform and the need for simplicity we ended up with an almost identical system.

Thanks for sharing the article it was a good read and validation.