definition user {}

definition resource {
  relation reader: user
  relation writer: user
  relation commenter: user

  permission view = reader + writer + commenter
  permission edit = writer
  permission can_comment = writer + commenter
}