Description of potential lookup table for eoapi auth

gistfile1.txt

CREATE TABLE roles (
  id int GENERATED ALWAYS AS IDENTITY PRIMARY KEY,
  name text UNIQUE NOT NULL
);

INSERT INTO roles (name) VALUES
('cargill'),
('bigfarm'),
('farmer')
;

CREATE TABLE role_membership (
  child_role int,
  parent_role int,
 );
 
 INSERT INTO role_membership (child_role, parent_role) VALUES
 (3,2), -- farmer belongs to bigfarm
 (2,1) -- big farm belongs to cargill
 ;
 
CREATE TABLE role-filter (
  role int,
  rule jsonb
);

INSERT INTO role_filter(role, rule) VALUES 
(1, {"op":"eq","args":[{"property: "collection"},"cargillcollection"]}),
(2, {"op":"s_intersects","args":[{"property":"geometry"},{"geometry":...}]);

you could then use a recusive query to find all the rules that 'farmer' or any of 'farmer's parents have set on them.
"AND" together all those CQL fragments and add them to the search.