regardless of the OS, any time you start to get tricky with per object permissions, before long you end up with a complex mess that's a pain in the butt to keep track of.