likewise would pull out this hard coded logic as much as possible. e.g. create `_is_succeed_admin(user)` and `_is_pm(user)` helper functions, so that if the roles change there's only a single place to maintain them