Some more context.
Our product is a 10 year young SaaS application with a python django monolithic backend. we have multiple "dimensions" affecting a user's permission to resources or functionality :
• the user's subscription plan
• trial status
• access status regarding a project or media file (owner, team member, shared)
• sharing
• application access (our website, integration...)
• platform (self serve or enterprise platform, we have 2 system deployments)
• role of user in team, organisation
• etc.
We would like our new "permissions engine" to be both now usable within our monolith as well as in new microservices that we started to develop.