The new permissions model looks great!
If this can eventually also be applied to Views then we would have 80% of “field-based permissions”, since we could expose our sensitive DB fields only in certain Views, which could then be permissions-restricted.
Multiple entity views would complete the picture 