like what would a UI look like where a user has permissions but those permissions aren't tied to an object?