Can spicedb represent the authorization relationship of three individuals? For example, john has a pm role in project1, but does not have pm role in project2. Is there any good idea?