the docs don't cover querying permissions for a definition so I'm guessing that's still a work in progress. I'm trying to model it so that if certain relations are revoked, cascading permissions are reduced.