Fine grained access management in paid SpiceDB does this (with special care to make it lightning fast): https://authzed.com/docs/spicedb-dedicated/fgam