We have User::isAllowed() for that :)