definition resource {
  relation viewer: user | anonymoususer:*
}