definition user {}

definition document {
    relation document_manage: role#member
    permission manage_document = document_manage
}

definition role {
    relation member: user
}