item_authorization.js

class ItemAuthorization {
  construtor(user, item) {
    this.user = user
    this.item = item
  }
  
  can_create() {
    return this.item.list.organization_id == this.user.organization_id; 
  }
  
  can_update() {
    return this.item.list.organization_id == this.user.organization_id;
  }
  
  can_read() {
    return true;
  }
  
  can_delete() {
    return this.item.creator_id == this.user.id; 
  }
}