Do we need to check if `user` is `None`?