This chapter looks at relationship-based authorization models and shows how to implement data ownership, parent-child resources, groups, and hierarchies.

Skimmed through this, need to come back later