definition user {}

definition division {
  relation user: user
  permission member = user
}

definition file {
  relation shared_with: division
  relation division: division
  relation owner: user
  permission select = owner + shared_with->member
}