definition resource {
  relation private: organization#member
  relation public: organization#member
  relation viewer: user
  permission view = viewer + public
}