Can this just use the Role object, rather than the name? (I suspect this same criticism applies to the LMS `has_access` function).