a user can view a nimblet if
- user is admin
- user has admin, read, or write permissions on the nimblet
- user has admin, read, or write permissions on the nimblet's project nimblet
- nimblet is
owned_by
user - nimblet's project is
owned_by
user
a user can modify a nimblet if
- user is admin
- user has admin or write permissions on the nimblet
- user has admin or write permissions on the nimblet's project nimblet
- nimblet is
owned_by
user - nimblet's project is
owned_by
user
a user can delete a nimblet if
- same as modify, except a
project
nimblet can only be deleted by it's owner