Make use of User->isAllowed
Make sure to check permissions in attemptSave, too