In order not to add more to the scope of #297, I've opened a new issue. We should unit tests more out of the userAccess, given this is such a crucial piece of code.
