This is the kind of cross-cutting feature I've had to implement for clients, and yes, it's painful. I built an internal web application for a large and somewha

This is the kind of cross-cutting feature I've had to implement for clients, and yes, it's painful. I built an internal web application for a large and somewhat paranoid company that required three distinct layers of security. While I'm pretty sure I implemented them correctly, and could explain pretty well how they worked when pressed, I think it was just too much for most users to wrap their heads around the mental model. In retrospect, I should have pushed back. If I couldn't convince them to with a simpler model, I should have at least advocated for adding the layers of security incrementally, both to let the users understand what the model is and to help the development team understand what the model should be.