definition document {
  relation reviewer: user
  relation commenter: user

  relation read_role: document#reviewer | document#commenter

  permission read = read_role
}