Should this be returned defensively? Since arrays are passed by reference it might be safer to return a copy of the array as opposed to the array itself. Same with the getUserMapping()