Well the relationships between users, and the resource->shared-user relationship we could do (they are user-generated), it's the silly all-encompasing "who owns what" that we can't do without having all the ids. I think if we use a caveat for that, then we can model the entire rest of the system