Pass user object instead of user ID to userCanModify() - needed after last changes