User ← user_roles → Role ← role_resources → Resource (type=menu/button)
                                   ↘︎
                                role_permissions → Permission