definition user {}
definition application {
    relation player: user
    relation banned: user

    permission active_player = player - banned
}

definition apiresource {
    relation consumer: application

    permission call = consumer->active_player
}