hasRule in UserController