definition user {}

definition folder {
  relation viewer: user
  permission view = viewer
}

definition document: {
  relation viewer: user
  relation banned: user
  relation folder: folder
  permission view = viewer + folder->view - banned
}