permissions: by default, don't show entities with no access There might be a lot of entities the user/group don't have access and it is much more important to be able to see at a glance what the user/group has to access to than what it doesn't have access to.