In *_user_is_allowed() fns bail early on (super) admins
Allow *_is_user_allowed() fns to be passed a user ID. Still defaults to current user