Fix user_can check