then you could do something like:

relation platform: platform

and on the platform:

relation disabled: attribute#has

and then do

object:doc#platform@platform:yourproductname

and then:

permission write = owner->act_on_behalf - platform->disabled