definition document {
  relation approver: user
  relation reviewer: user
  relation commenter: user

  permission approved_and_reviewed = approver & reviewer

  relation read_role: document#approved_and_reviewed | document#commenter

  permission read = read_role
}