Take a look at this section of the manual. This explains how we encrypt a data structure encoding change permissions with data that leaves the database: http://

Take a look at this section of the manual. This explains how we encrypt a data structure encoding change permissions with data that leaves the database: http://www.nextdb.net/devguide/index.html#Up http://www.nextdb.net/devguide/index.html#Up At a thirty-thousand foot level, we explain the "round trip security model" here: http://docs.google.com/Presentation?id=df7mdmdw_11c5rmfbg9 http://docs.google.com/Presentation?id=df7mdmdw_11c5rmfbg9