@pax0s3 one option:

definition repository {
  relation org_public: organization
  permission view = org_public->member
}

then you only write

org_public

if the repository is public