See also https://openfga.dev/, Auth0's open-source ReBAC solution