class OrganizationalUnitController {

    public boolean canReadOrgUnit(final OrganizationalUnit organizationalUnit) {
        final boolean securityPermission = authorizationManager.authorize(organizationalUnit,
                                              OrganizationalUnitAction.READ,
                                              user);
        return securityPermission
                || userIsAtLeast(ContributorType.CONTRIBUTOR, organizationalUnit.getContributors());
    }

    @Inject public  OrganizationalUnitController(AuthorizationManager authorizationManager,
                                        User user);

}