won't this bomb if the logged in user is not a super user? You might some unit tests if none exist