[user:bob] [doc:foo] read = [doc:foo#owner, user:bob] owner = [user:alice] [user:oscar] [user:alice]