First direction is generally preferred, as it makes more logical sense; you only walk the other way if you need to compute a permission with the

user

as the resource