The scenario involved is one where I may want to allow a user to re-use host permissions for my custom host object. In the Katello case, this would be trying to re-use host permissions to guard Katello Content Hosts for a more seamless permission experience. The problem arises in two ways.

1. Creating new permission named the same as another permission but specifying a different resource type denies access to all routes guarded by that permission.

2. Attaching current permissions, for example :view_hosts, to a route and another active record model, for example Content Host, in order to guard the model and route using the same permissions as a Host to allow for a cleaner user experience.