definition user {}

definition platform {
    relation default_assignee: user

    permission can_manage = default_assignee
}

definition folder {
    relation parent: folder | platform
    relation assigned: user | folder#can_manage | platform#can_manage
    permission can_manage = assigned
}

definition file {
    relation parent: folder

    permission can_manage = parent->can_manage
}