[user:bob] [doc:foo] read = [user:bob, doc:foo#owner] owner = [user:alice] [user:oscar] [user:alice]