well I'm of course biased, but Relationship Based Acces Control (ReBAC) like Zanzibar provides a number of advantages but at some additional complexity overhead