we've already wanted that one for ourselves, the most contentious part of the discussion is whether we need to preserve the resolution path for each subject, e.g. this user has the read permission on this resource via being a writer on the resource