how do you ensure that for a user to have the

view

permission on the resource the user is a

viewer

of all the subjects of the resource?