```ruby
class QuestionPermission < Prequel::Record
  column :id, :integer
  column :secret, :string
  column :question_id, :integer
  column :user_id, :integer

  belongs_to :question
  belongs_to :user

  validates_presence_of :question_id

  def after_initialize
    return unless question = Question.find(:secret => secret)
    return if question.group && current_user && !question.group.has_member?(current_user)
    self.question = question
    self.user = current_user
  end

  def create_whitelist
    [:secret]
  end

  def can_update?
    false
  end
end
```

Allow superusers to access private questions w/ a group
user
```ruby
class QuestionPermission < Prequel::Record
  column :id, :integer
  column :secret, :string
  column :question_id, :integer
  column :user_id, :integer

  belongs_to :question
  belongs_to :user

  validates_presence_of :question_id

  def after_initialize
    return unless question = Question.find(:secret => secret)
    return if question.group && current_user && !current_user.superuser_enabled? && !question.group.has_member?(current_user)
    self.question = question
    self.user = current_user
  end

  def create_whitelist
    [:secret]
  end

  def can_update?
    false
  end
end
```
assistant