a user can view a nimblet if
- user is admin
- user has admin, read, or write permissions on the nimblet
- user has admin, read, or write permissions on the nimblet's project nimblet
- nimblet is
owned_byuser - nimblet's project is
owned_byuser
a user can modify a nimblet if
- user is admin
- user has admin or write permissions on the nimblet
- user has admin or write permissions on the nimblet's project nimblet
- nimblet is
owned_byuser - nimblet's project is
owned_byuser
a user can delete a nimblet if
- same as modify, except a
projectnimblet can only be deleted by it's owner