Don't use .administrator? but can? for permission checks.