CR change: added new method isUserAllowed()