for each port as a permission, you'd have a

relation

per port I guess?