1 domain=mydomain
2 user_assigned?Settings:blanket:no?assigned.user.permission
3 user?Settings:blanket:no?user.permission