So when you want to
- update a record, do a read, and as part of the read, return if you canUpdate boolean for the logged in user.
- delete a record, do a read, and as part of the read, return if you canDelete boolean for the logged in user.
so canUpdaet, and canDelete would be non-real fields on the model/table, that take in some code like, xyz role can see the record, and maybe xyz user is the logged in user