and even with the

self

keyword, you'd still need a means of indicating whether a user could perform an action