auth: global permissions given to the default user are the bare minimum and should apply to *all* other users too Drop the "subtractive permission" config option "inherit_from_default" that when set to false would give users less global permissions than the default unauthenticated user. Instead, think positive and merge all positive permissions. At the end, filter the global permissions to make sure we for each kind of permissions only keep the one with most weight.