The following discussion from !162678 should be addressed: - [ ] @brodock started a [discussion](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/162678#note_2062268291): (+1 comment) > should this and other `can?` checks be refactored and extracted to their own Policies? https://docs.gitlab.com/ee/development/policies.html that way we can test then in isolation as well.