you're going to write a schema that outlines the kinds of relationships that can exist and the permissions that can be phrased in terms of those relationships, and then your system will write those relationships