And if I'm reading the docs right the thing that comes after

#

in the relation definition can be a computed permission?