definition user {}

definition project {
  relation guest: user
  relation planner: user
  relation reporter: user
  relation developer: user
  relation maintainer: user
  relation owner: user
  relation admin: user

  permission read = developer + maintainer
  permission write = maintainer
}

definition group {
}

definition resource {
  relation reader: user | user:*
  relation writer: user | user:*

  permission read = reader + writer
  permission create = writer
  permission update = writer
  permission delete = writer
}