Implement `PublishStatusPermissionLogic`

We should implement `PublishStatusPermissionLogic` to check to allow view the object by `pub_state` field.
Because of DRY principle.

https://github.com/kawazrepos/third-impact/pull/19#discussion_r11713333