Exactly, and I forgot that is already there: https://github.com/projecthydra/hydra-head/blob/master/hydra-access-controls/lib/hydra/user.rb#L25-L27