It looks like this class only needs the user's GUID. Injecting the GUID instead of a full user would make this less coupled and easier to test.