for the latter you should probably be making bulk ...
# spicedb
y
for the latter you should probably be making bulk permission checks