definition organization {
  relation view_projects: user:*
  permission can_view_projects = view_projects
}