in that case, it seems that the easiest way to get what i want would be: 1. call lookup subjects to get a list of IDs 2. check each ID as to whether the subject has access to each specific

relation

type and using a call per

relation

build something like

{read: true, write: true, execute: false}

Right?