User A can read (but not write) tasks from Facility BContext for that user, but I'm not sure how best to handle a facility-specific route, for example trying to read tasks from Facility B. Context will contain all of that user's permissions, but I'm not sure how to check those permissions against a route-specific ID (for example facilityID) in a middleware. facilityID in context (since a lot of procedures won't have a facilityID at all) and it doesn't look like there's a way to pass dynamic values into middleware using Meta.