Added canUserAccess() to user model

Signed-off-by: Tom Wright <tom@inflatablecookie.com>