like if you're asking "does the user have access to all of a class of thing," you can put a permission on a singular "platform" object