YuruToot/app/policies/account_moderation_note_policy.rb

# frozen_string_literal: true

class AccountModerationNotePolicy < ApplicationPolicy
  def create?
    staff?
  end

  def destroy?
    admin? || owner?
  end

  private

  def owner?
    record.account_id == current_account&.id
  end
end