Not sure how to write a query for that general suggestion without recursively crawling the filesystem, comparing directory permissions against child directory's and file permissions.