Thanks! - got it - so the trick is to not model folder.parent as a relationship at all. folder.assigned is what's relevant here. I was missing that insight. And it's up to the client to remove the folder#can_manage relation.