self.entrusted_to_user in MediaEntry, Collection, FilterSet
simplify User#groups
MyController#dashboard extension
shared example model spec WIP