Single path if I understand your question correctly. Right now I’m solving it with two queries - seeing what docs a team has access to, seeing what docs a user has access to, and then doing an intersect