if you instead issue

check document:somedoc#view@user:someuser#viewer_only

, SpiceDB will walk

#all

(if it exists for that user) to

viewer_only

and then stop there