instante-social/app/policies/report_note_policy.rb