definition user { relation viewer: user permission view = viewer }