you could pass both the user's IP and the allowed ...
# spicedb
j
you could pass both the user's IP and the allowed range at check time