Simple permission control database design