yes;

+

indicates that the sets are joined on a permission while here, it is the set of possible subject types