How to design a context-specific permissions/roles system in PostgreSQL?

Question

I have a table for schools and a table for users. They have a many-to-many relationship.

I explored creating a permission system by having a many-to-many relationship