yetitwo
definition repo { relation reader: user relation public_reader: user:* permission read = reader + public_reader }