spicedb isn't really set up to answer "what computed permissions does this user have on this resource?"