definition user { }

definition sparkle {
  relation sparkler: user
  relation sparklee: user
  relation reader: user:*

  permission read = sparklee + sparkler + reader
  permission update = sparkler
}