it shows a model where what a user can do is separate from which thing a user can do it on