by introducing this method, can we have this concept for non-api controllers too?
We often have such checks like $user can see $model in normal web apps too.
Have not check implementation details though.