definition user {
  relation organization: organization
  relation edit_self: user
  relation view_self: user

  permission view = view_self + organization->view_members
  permission edit = edit_self + organization->edit_members
}