definition user {}

definition resource {
    relation has: scope
    permission access = has->access
}

definition role {
    relation is_in: user
    permission access = is_in
}

definition scope {
    relation has: role
    permission access = has->access
}