definition user {}

definition organization {
  relation viewer: user
  permission view_repos = viewer
}

definition repository {
  relation org: organization
  relation creator: user

  permission write = creator
  permission view = org->view_repos + creator
}