definition user { relation supervisor : user } definition expense_report { relation owner : user permission edit = owner permission delete = owner permission approve = owner -> supervisor }