[refactoring] userOrGroup remains private.