definition user {}

definition group {
  relation member: user
}

definition department{
    relation group: group
}

definition organization {
  relation dept: department
  permission view = dept->group->member
}