centralized access to the user model (which is fully in the realm of authority/promoter)