Refactoring permissions: step 1 accessible_by_user