definition user {}
definition application {
    relation player: user
    relation banned: user
}

definition apiresource {
    relation consumer: application

    permission call = consumer->player - consumer->banned
}