Standard permissions are too coarse when one user needs access without changing ownership. ACLs and xattrs solve that, and the syntax is less scary than it looks.