move date helpers to own module
cheack for outcomes attributes in ReportsController#create
create permission model
permission for belongs_to associated records