definition user {
relation supervisor : user
permission approve = supervisor + supervisor->approve
permission buy = supervisor + supervisor->buy
permission drive = supervisor + supervisor->drive
}
definition bar{
relation owner : user
permission drive = owner
permission buy = owner
permission approve = owner->approve
}
definition foo{
relation owner : user
permission edit = owner
permission delete = owner
permission approve = owner->approve
}