Question

Authorization rules when modeling one-to-many relationship