definition user {}

definition organization {
  relation: user
  
  permission is_member = user
}

definition repo {
  relation user: user | user:*
  relation organization: organization

  permission view = user + organization->is_member
}