can you share an example of the schema?

something like this https://play.authzed.com/s/3EP5d3iQgAVc/schema

$ zed permission lookup-resources document_type can_read user:user1
org1-org2-invoice
org1-org3-invoice

so you want to only find those for where a user is a member of a specific org?

i only want to return the doc types from a single partnership (org1-org2, or org1-org3). Not all at the same time

hmmm

scaling this up where a user might be members of many orgs, and each partnership might have dozens of doc types. Thinking of a UI that shows what a user has access to in the context of a single partnership, I don't want to retrieve the access for every partnership the user is in

I'll have to give this some thought

I think the problem remains even if i represent the org-user as a separate entity, because as an org-user they still have access to all the doc types of all the partnerships their org is in. I'm open to schema changes that might help this as well. I'll have several different types of objects that hang off an org or partnership. Some types could have upwards of a million items.

yeah, if you need to combine more than just user-org

yeah, semantically i think that's exactly what I want