Add proper permission checking to personal note type

aleksis/apps/alsijil/schema/personal_note.py

@@ -26,6 +26,14 @@ class PersonalNoteType(
             "documentation",
         )
 
+    @staticmethod
+    def resolve_can_edit(root: NewPersonalNote, info, **kwargs):
+        return info.context.user.has_perm("alsijil.edit_personal_note_rule", root)
+
+    @staticmethod
+    def resolve_can_delete(root: NewPersonalNote, info, **kwargs):
+        return info.context.user.has_perm("alsijil.edit_personal_note_rule", root)
+
 
 class PersonalNoteBatchCreateMutation(BaseBatchCreateMutation):
     class Meta: