User can access to some dashboard part, or not

Don't break demeter's law.