definition user {
  relation parent_org: organization
  permission view = parent_org->member
}