I've definitely run into situations where I needed to grant very specific, granular access without overhauling my entire ACL. It's always a balancing act between security and keeping things manageable. I'm curious to see what solutions people suggest for jDownloads.