which two scenarios would you use Role-based data permission security method as compared to Tree based?