always check for user before checking its attributes