User::access() supports null param to return accessible access list