definition user {
  relation organization: organization
  relation self: user

  permission view = self + organization->view_members
  permission edit = organization->edit_members - self
}