Assume that a user granted as both admin and viewer on a doc (id: 1), who should prevent this relationship? SpiceDB or custom logic?