Currently I have resources (buttons, api endpoints) which have scopes (actions) and roles that have access to some resource-scope pairs. I want to model that structure in spicedb.