In other words, if read permission is composed of two relations one of which is a usergroup, the other of which is a user