why not directly call the _has_access_to_course method here instead of introducing these intermediate methods (one for each role - which may not be scalable)?