It would be handy to return the fetched entity. I know this is an access control function so it would be mixing duties but I think in this case it makes sense.