thank you. I have my work around for now 💪 If you need / want me to specify my use case & model, I can do it. For now it is the mixture of "Google IAM in SpiceDb" and aiding the Frontend to understand what capabilities the user has for a given Resource. That Resource (lets call it Partner or Company) ties / has a relation with all top level company resources.

Please add your +1 and any usage details to the issue, if you don't mind

not exclusively, but yes. I also think we will integrate with snowflake which uses its own thing, but I will likely need to list the permissions there aswell to map it out to snowflake permissions

so the one consideration is if we listed every permission, we'd have to issue a lot of checks to compute that

for my specific use case, I would have both the subject and the resource

you could use BulkCheck, if you know the permissions ahead of time