but the user could also be an `editor` directly