replace user.lecturer? with user.has_permission?