starting with events, tied to profiles (not accounts)

app/policies/event_policy.rb

@@ -0,0 +1,13 @@
+class EventPolicy < EditOwnPolicy
+
+  def owner?
+    member == record.profile.member
+  end
+
+  class Scope < Scope
+    # NOTE: Be explicit about which records you allow access to!
+    # def resolve
+    #   scope.all
+    # end
+  end
+end