definition access_token {
  relation grant_view_documents: user
  permission view_documents = grant_view_documents
}

is a simple model where you can check if the token can read any documents for the user