from .middleware.current_user import get_current_user, get_current_request

def permissions(instance, read = False):
    if read:
        return True
    u = get_current_user()
    if u.is_superuser or u == instance.author:
        return True
    return False