Why does the user need to be staff?