definition team {
  relation member: user with login_team_scope
  permission is_member = member
}

definition contents {
  relation allowed: team with login_team_scope
  relation enabled: team with login_team_scope
  
  // We prefer to keep this intersection if possible for safety
  permission member_view = enabled->is_member & allowed->is_member
}