and naming relations and permissions to make it clear that you're walking "through" the object twice