Yes, you are right, adding a port as an object is the natural way to do it. I didn't think of modeling it like above, where the port delegates the permission check to the host. Thanks!