i think you can look up a resource but I wanted to just offload all checks straight to spicedb instead of writing my own logic to do it