so there are a few options: (1) use

LookupResources

to prefilter and then pass those to your search (2) conduct your search and use multiple checks like you described. Longer term: https://github.com/authzed/spicedb/issues/207