definition project {
  relation user: user
  relation banned: user
  permission use = user - banned
}

then when an admin wants to ban a user, they write the

banned

relation