if I don't necessarily know a specific object ID that I am checking a permission for, but i want to check if this subject has this permission for any object at all, what is the best path to check that permission?