There are a number of cases where I'd like to be able ask questions like "which objects can X see" or "which projects are editable by non-admins" or other such queries. The general case is the ability to search by either exact policy (which objects of type T have policy X) and policy subsets (which objects of type T would allow users U or project members P to see them).