if I have a subscription for notifications without any filters client side, but I add a permission query that a user can only see notifications meant for him or her, is that a good approach? Is that a permission query called SomeNotificationExists where I check the receiver?