Added user_can check