moving canUserPerformAction to test inside the controllers