@User a relation is used for when a concrete relationship can existing between a resource and a subject (i.e. between two objects). permissions, on the other hand, are computed based on one (or more) relations or other permissions