Application vs. Database: Where Should Permissions Live? | Hacker News Reader