how design a declarative, powerful and extendable policy-based access control (PBAC) with the next idea?

Question

I\'m looking sugges and help for design a little complicated PBAC using python, pydantic y motor(mongodb), I will try to explain A little about my structure to see if you un