definition user {}

definition folder {
  relation viewer: user
  permission view = viewer
}

definition file {
  relation viewer: user
  relation folder: folder
  permission view = viewer + folder->viewer
}