or "user is a reader, but not when accessing from ...
# spicedb
j
or "user is a reader, but not when accessing from an internal network"