does this mean that permissions have to be duplicated for all of these types of relationships/hierarchies? it seemed that zanzibar syntax would allow to model these more concisely/generally