public function hasAccess(User $user) { return !$this->roles or array_intersect($user->roles, $this->roles); }