definition user {}

caveat is_public(privacy string) {
  privacy == 'PUBLIC'
}

definition document {
  relation reader: user with is_public
  permission view = reader
}