in this case, I think 1) might still viable because the first check would be "can alice share this doc?" and the second check would be "can this doc be shared with this other person?" (and their relationship via the billing team is part of the permissions check resolution)