1) Use getToolByName instead of traversal for getting acl_users, because it is best practice.

2) Maybe use `portal_membership` instead of `acl_users` – you'll get the member (which technically has the property) instead of the user.