definition user {}

definition department {
  relation member: user
}

definition item {
  relation department: department
  permission view = department->member
}