definition resource {
  relation viewer: user | anonymoususer
}