definition user {}

definition platform {
  relation superuser: user
}

definition resource {
  relation platform: platform
  relation viewer: user
  permission view = viewer + platform->superuser
}