I think i'll still need to add a

relation site: github/site

to add the

site->staff_access

check in the repo permission. A repo can be org owned and I do have a site relation there, but it can also be user owned and there is no

site

relation on the user.