probably something like `permission view: user = w...