definition user{} definition resource { relation admin: user | resource#owner relation owner: user }