Comment by voidnullvalue

This thread is relevant. Their permissions system is just on entities, and isn't a real EBAC system.