you'd use a read relationships for the user on the record if you are using an RBAC-like system