Use access levels instead of new conditions

app/policies/group_policy.rb

@@ -77,6 +77,7 @@ class GroupPolicy < BasePolicy
   end
 
   rule { maintainer }.policy do
+    enable :maintainer_access
     enable :create_projects
     enable :admin_pipeline
     enable :admin_build
@@ -88,6 +89,7 @@ class GroupPolicy < BasePolicy
   end
 
   rule { owner }.policy do
+    enable :owner_access
     enable :admin_group
     enable :admin_namespace
     enable :admin_group_member

ee/app/policies/epic_policy.rb

@@ -3,9 +3,6 @@
 class EpicPolicy < BasePolicy
   delegate { @subject.group }
 
-  condition(:maintainer) { @subject.group.has_maintainer?(@user) }
-  condition(:owner) { @subject.group.has_owner?(@user) }
-
   rule { can?(:read_epic) }.policy do
     enable :read_epic_iid
     enable :read_note
@@ -17,5 +14,5 @@ class EpicPolicy < BasePolicy
 
   rule { can?(:create_note) }.enable :award_emoji
 
-  rule { maintainer | owner }.enable :admin_note
+  rule { can?(:owner_access) | can?(:maintainer_access) }.enable :admin_note
 end