So I should say:
user X --- membership --> group A
group B -- composition --> group B
So in my world, user X would be able to access things "owned" by group B. But how do I find out that the user can do it?
