preliminary support for access fields of the User entity (requireAuth)