Got a permission modeling question. Let's say I have this very simple schema

definition user {}

definition organization {
    relation member: user
}

and I want to define a permission "view", which is whether a user is allowed to view a user object. It should be the set of all users they share an organization relation with, plus themselves. How would I go about doing that?