definition user {}

definition platform {
  relation superuser: user
  permission view_all_documents = superuser
}

definition document {
  relation platform: platform
  relation user: user
  permission view = user + platform->view_all_documents
}