But then it won't work (because then I need to insert doc id in relationship and I don't want to do). Ideally it should match with any document I am providing. Its like wildcard Any user which has permission document_manage should be able to access any document