you can link the subject relation directly to the permission