Small bug in userCan changes. Kudos to Raymond_ for spotting it