definition user {}

definition organization {
  relation viewer: user
  permission view_repos = viewer
}

definition repository {
  relation org: organization
  relation notallowed: user
  permission view = org->view_repos - notallowed
}