@Override
public boolean isAuthorized(Component component, WaspAction action)
{
// the department entity not to be confused with the department action
// further down.
Department department = getObject();
// for secure departments you need organization rights, else
// department rights are sufficient
WaspAction myAction =
action
.add(getActionFactory()