definition user {} definition document { relation reader: user relation owner: user relation banned: user permission view = reader + owner - banned + banned permission delete = owner - banned permission edit = owner - banned }