Imagine you have devices in device tree grouped together by company branches Then you have libraries that group such devices in all branches based on the application environments they're working for... ie. Application A ... Application Z
Obviously, there will be overlaps as some resources may be shared among multiple application environments.
Then you have libraries that group sensors together based on scope of responsibility ... ie. Library application support, OS support, database support, Network Support etc.
How to make sure that lower level (i.e. per branch) application support can only work with sensors in their own branch but they can view status of whole environment of particular application and higher level (common for all branches) support can work will all sensors that belong to their "application support" library?
How to set the access rights once and have them applied to all new devices based on their membership in device group, in libraries etc?