then you could "remove" a user from a specific repo by writing a relationship for the repository to the

notallowed

relation