handle potentially null users attribute