JC: use grant_access? and get rid of all has..right? method.