# Porting GalaxyNG onto new-style Roles
## Galaxy NG Current Usage
* Uses group permissions only
* Can use an endpoint to return which permissions a user has
* Can pulp filter for objects i have a specific permission on?
* Who defines roles?
* Access Policy
* or Roles viewset