If I'm understanding your requirements correctly, you could add relations to the document definition that specifies what members of a parent folder should be able to do. Here is an example for read and edit. https://play.authzed.com/s/d1jEwUpidSr5/schema