definition user {}

definition team {
  relation member: user
}

definition resource {
  relation viewer: user | team#member
  permission view = viewer
}