But if I do that, and I have 'document:doc#viewer@user:tom', I cannot assert that 'folder:f1#read@user:tom' Even if I have a relationship of document:doc#folder@folder:f1, right? I don't see where is the relation between a user with access to a document and also to the parent folder. 🤔