implement tasks accessible_by_user as a scope