The UNIX model assumed each human had one user. It did not provide a flexible way to sub-divide that scope for each program running as that user.

It has been extended, but not in a way that non-technical users can really use.