domain=mydomain user_assigned?Settings:blanket:no?assigned.user.permission user?Settings:blanket:no?user.permission