definition department {
  relation direct_child: department
  permission child = direct_child->child
}