@User I wrote a little bit about ABAC in https://github.com/authzed/spicedb/issues/200#issuecomment-947107907 It contains basically what you've described plus some other common ABAC concepts in other graph systems that we don't necessarily support yet.