It looks like there's a bit of duplication of these private methods in the DashboardController. Potentially, these methods can be rolled up into a new object that encapsulates the same logic (passing in `current_user`).