you could also do two checks, and evaluate them at the same snapshot (pseudocode):

evaluation_time, is_allowed = check("document:123", "editor", "user:1")
_, is_allowed = check("folder:456", "editor", "user:1", consistency("snapshot", evaluation_time))