Sorry, one last question. I'm not sure I understand the recommendation for

LookupResources

. In the above example, I assume if I wanted to lookup projects a user has access to, I would pass the ZedToken related to the parent of projects (e.g tenant). Does this mean if I write the relationship from project-> tenant I should also write the ZedToken to tenant?