Create a way to tell what level a given record as a permission from

[rreinhardt9]

I'm not sure exactly what it would look like yet, or how much is gem logic vs business logic, but as we use the library it can become confusing when trying to figure out what "level" a specific permission has been granted at.

For example, if I have users, users are in groups and are also in "accounts". I've set up Accessly so that users can have permission either individually, through their groups, or through their account. If I set a permission at the group level, the user will now also return true for that permission. But, there is no good way for me to know what type of record (group) or WHICH group the permission has been granted through that is giving this user that permission.

It could be potentially really helpful to be able to figure out not only if the user has permission, but where that have that permission from? Individually? Through another record? Which other record?

What are some ideas on what this API could look like?