why can't you just do that like so?

definition thing {
  relation registered_user: user:*

  permission view = registered_user
}