sysuser: simplify access mode syncing by introducing helper function for it
update TODO