Jake
definition object { relation org: org1 relation group: group1 permission view = (org->admin - group->org_admin) + group->member }