model
schema 1.1
type user
type group
relations
define member: [user]
type folder
relations
define parent: [folder]
define viewer: [user,user:*,group#member] or viewer from parent
type document
relations
# documents live within folders
define parent: [folder]
define viewer: [ user,user:*,group#member] or viewer from parent
Example: