definition platform {
    relation administrator: user
    permission super_admin = administrator
}

definition organization {
  // The platform is generally a singleton pointing to the same
  // platform object, on which the superuser is in turn granted
  // access.
    relation platform: platform
    permission admin = platform->super_admin
}

definition resource {
    relation owner: user | organization
    permission admin = owner + owner->admin
}

definition user {}

administrator

organization

definition organization {
  // The platform is generally a singleton pointing to the same
  // platform object, on which the superuser is in turn granted
  // access.
    relation platform: platform
    relation administrator: user
    permission admin = administrator + platform->super_admin
}