Hacker News Reader

I don't want unlimited writes. I basically want to unlock nearly everything but approve writes in some scenarios.

Where do unix permissions and a different user and extended attributes fall short for that?