definition user { } definition resource_platform { relation admin: user } definition resource { relation resource_platform: resource_platform relation admin: user permission can_manage = admin + resource_platform->admin }