Yes this will work, but you will actually have to write that relationship, and without knowing more about your use case the permissions questions that you are able to ask seem weird