i mean... based on what i understand of your problem, I wouldn't be reaching for relation-based authorization at all