definition user {}

definition organization {
  relation role: role
}

definition role {
  relation member: user
}

definition resource {
  relation viewer: role
  permission view = viewer->member
}