so the real difference is if we use the relation as permission, whether we check group id or check user id