stashing some thoughts on how I want to port cancan to python

pycan.py

class User: pass
class Project: pass
class Assignment: pass


def current_user():
    return User()

def can(action,classes):
    raise NotImplementedException
    
class Ability:
    
    def __init__(user):
        
        if user.is_admin:
            can(MANAGE, ALL)
        else:
            can(READ, ALL)
            can(CREATE, Comment)
            
            def can_edit_comment(comment):
                return comment.author == user
            
            can(UPDATE, Comment, can_edit_comment)